[dsauerbrun]

why is that an issue? just in case someone is peering over your shoulder? the pw will be sent in the request body as plaintext on a post...

[knodi123]

> just in case someone is peering over your shoulder

Yes, exactly that. That's why I highlighted the risk of someone looking in the right spot at the right time.

> the pw will be sent in the request body as plaintext on a post

Which is how every single login form in the world works, today, for this very reason.